Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Port Forwarding on Cisco 1700 series

Status
Not open for further replies.

Charliesz

Technical User
Jul 24, 2003
95
CA
Hello,


I have a cisco 1710 router which im trying to configure to forward port 21 to an internal address.

Since im fairly new to the world of CISCO, i just cant find a forwarding option (using ConfigMaker utility v2.6). Reading through the forums, ive realized i have to do it , somehow, with the use of IOS.

Would anyone be kind enough to help out on this one?
Just trying to access FTP which is on an internal server with IIS.


Thanks a bunch
 
MY IOS looks as such:

!
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service tcp-small-servers
no service udp-small-servers
!
hostname company_name
!
enable secret 5 xxxxxx
username user password 7 xxxxxxx
!
no ip name-server
!
ip subnet-zero
no ip domain-lookup
ip routing
!
interface Ethernet 0
no shutdown
description connected to Internet
ip address 66.x.x.x 255.255.255.224
ip nat outside
no ip mroute-cache
keepalive 10
!
interface FastEthernet 0
no shutdown
description connected to EthernetLAN
ip address 172.16.0.1 255.255.0.0
ip nat inside
no ip mroute-cache
keepalive 10
!
! Access Control List 1
!
no access-list 1
access-list 1 permit 172.16.0.0 0.0.255.255
!
! Access Control List 100
!
no access-list 100
access-list 100 permit udp any eq rip any eq rip
access-list 100 permit tcp any any range ftp-data ftp
!
! Access Control List 101
!
no access-list 101
access-list 101 deny 53 any any
access-list 101 deny 55 any any
access-list 101 deny 77 any any
access-list 101 deny tcp any eq 445 any
access-list 101 deny tcp any any eq 445
access-list 101 permit tcp any host 66.x.x.x eq telnet
access-list 101 permit tcp any host 66.x.x.x eq ftp
access-list 101 permit tcp any host 66.x.x.x eq ftp-data
!
! Access Control List 102
!
no access-list 102
access-list 102 deny ip any any
!
! Access Control List 103
!
no access-list 103
access-list 103 permit udp any eq rip any eq rip
access-list 103 permit tcp any any range ftp-data ftp
!
! Access Control List 104
!
no access-list 104
access-list 104 deny ip any any
!
! Access Control List 105
!
no access-list 105
access-list 105 permit udp any eq rip any eq rip
access-list 105 permit tcp any any range ftp-data ftp
!
! Access Control List 106
!
no access-list 106
access-list 106 deny ip any any
!
! Access Control List 107
!
no access-list 107
access-list 107 permit ip any any
!
! Access Control List 108
!
no access-list 108
access-list 108 deny ip any any
!
! Dynamic NAT
!
ip nat translation timeout 86400
ip nat translation tcp-timeout 86400
ip nat translation udp-timeout 300
ip nat translation dns-timeout 60
ip nat translation finrst-timeout 60
ip nat inside source list 1 interface Ethernet 0 overload
!
! DHCP Server
!
service dhcp
ip dhcp excluded-address 172.16.0.10 172.16.0.254
ip dhcp pool 1
network 172.16.0.0 255.255.0.0
default-router 172.16.0.1
dns-server 172.16.0.169
!
router rip
version 2
network 172.16.0.0
passive-interface Ethernet 0
no auto-summary
!
!
ip classless
!
! IP Static Routes
ip route 0.0.0.0 0.0.0.0 Ethernet 0
no ip http server
snmp-server community public RO
no snmp-server location
no snmp-server contact
!
line console 0
exec-timeout 0 0
password 7 xxxxxxx
login
!
line vty 0 4
password 7 xxxxxxx
login
!
end
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top